Daily Log for #alfresco IRC Channel

Alfresco discussion and collaboration. Stick around a few hours after asking a question.

Official support for Enterprise subscribers: support.alfresco.com.

Joining the Channel:

Join in the conversation by getting an IRC client and connecting to #alfresco at Freenode. Our you can use the IRC web chat.

More information about the channel is in the wiki.

Getting Help

More help is available in this list of resources.

Daily Log for #alfresco

2019-02-15 08:49:54 GMT <alfresco-discord> <Hiten> Hi Guys I am currently grappling with the issue in the below link https://community.alfresco.com/thread/214338-run-workflow-script-task-tenant-admin

2019-02-15 08:49:56 GMT <alfbot> Title:Run workflow script task tenant admin | Alfresco Community (at community.alfresco.com)

2019-02-15 08:50:54 GMT <alfresco-discord> <Hiten> Alfresco CE 5.2 and Alfresco SDK 3.0

2019-02-15 08:52:30 GMT <alfresco-discord> <Hiten> any suggestions what should I do to make my workflow work with elevated privileges in mutli tenant environment

2019-02-15 08:53:11 GMT <alfresco-discord> <Hiten> I am trying to use system user but getting the below error Caused by: org.alfresco.service.cmr.workflow.WorkflowException: 01150035 runas user 'system' does not exist.

2019-02-15 08:56:51 GMT <alfresco-discord> <Hiten> Below is the snippet of the workflow where I am setting system user instead of admin

2019-02-15 08:56:52 GMT <alfresco-discord> <Hiten> https://pastebin.com/gnGnYMZc

2019-02-15 08:56:53 GMT <alfbot> Title:workflow snippet - Pastebin.com (at pastebin.com)

2019-02-15 09:04:51 GMT <AFaust> hiten: Check the thread you linked - I just replied. In short: You cannot use hard-coded runAs values in this case and must make use of expressions that dynamically calculate tenant specific user name identifiers

2019-02-15 09:08:05 GMT <alfresco-discord> <Hiten> Thanks AFaust. I will quickly check it

2019-02-15 09:16:19 GMT <alfresco-discord> <Hans> alfresco domain name down? can't open support site or docs-site...

2019-02-15 09:19:11 GMT <angelborroy> yes, it’s down now

2019-02-15 09:19:17 GMT <angelborroy> They are working on it

2019-02-15 09:22:12 GMT <alfresco-discord> <Hiten> AFaust - I have gone through your answer and there are some question coming in my mind. First - I have read some of your answers on other post where you have suggested to use system user to avoid admin user issues(not like the one I am facing). So, isn't the system user present in tenant domain or is it also with username like system@<tenant_domain_name>

2019-02-15 09:22:55 GMT <alfresco-discord> <new-user> Hi

2019-02-15 09:23:07 GMT <alfresco-discord> <new-user> Is this site down https://artifacts.alfresco.com ?

2019-02-15 09:23:23 GMT <AFaust> Alfresco is currently experiencing some issues with some of the web sites.

2019-02-15 09:23:36 GMT <AFaust> https://twitter.com/OleHejlskov/status/1096329236305055744

2019-02-15 09:24:13 GMT <alfresco-discord> <new-user> Thanks Afaust

2019-02-15 09:24:16 GMT <AFaust> @Hiten Each tenant has its own System user + there is a global System user (for the default tenant)

2019-02-15 09:24:47 GMT <alfresco-discord> <ohej> Yes, docs, nexus (artifacts.alfresco.com), JIRA and WWW are all down currently. The team is working hard to get everything back online

2019-02-15 09:25:38 GMT <AFaust> ohej: Looks like those sites are not setup at cloud scale with autoscaling Kubernetes groups...

2019-02-15 09:26:24 GMT <AFaust> Kind of funny for a company banking so heavily on this topic in their product strategy...

2019-02-15 09:29:14 GMT <alfresco-discord> <ohej> ...

2019-02-15 09:29:41 GMT * AFaust puts the salt back on the kitchen counter...

2019-02-15 09:34:13 GMT <alfresco-discord> <Hiten> OK. Now to the second one where you have pointed out that I need to dynamically figure out the admin user. Here is what I am planning to do for this please point me if I am correct After the startEvent I put a serviceTask which will call the custom java class utilising the Tenant classes to give me the admin user name; setting it up in execution variable

2019-02-15 09:39:19 GMT <alfresco-discord> <Hiten> and I will be setting that user as the runAs user for elevated privileges

2019-02-15 10:04:14 GMT <AFaust> @Hiten: I would personally use the "end" event on the "startTask" itself to attach a listener and store the tenant-specific System / admin user name in a process variable for later resolution via an expression.

2019-02-15 10:09:02 GMT <alfresco-discord> <Hiten> you mean that I should attach <activiti:taskListener event="create"></activiti:taskListener> to the <startEvent/> itself for storing the tenant-specific system/admin user in the execution variable

2019-02-15 10:16:00 GMT <AFaust> Well, I did refer to the "end" event on the start task (startEvent in BPMN), and as an execution element, not a task element, the start task only supports execution listeners, not task listeners

2019-02-15 10:22:14 GMT <alfresco-discord> <Thijs> @angel.borroy I don't see an issue in using PostgreSQL in docker containers either. In most of the cases, we use a specific host mount for the data, so I think in that case, it shouldn't matter much

2019-02-15 10:22:44 GMT <angelborroy> I’ve been doing the same for years

2019-02-15 10:23:09 GMT <angelborroy> But many Docker “specialist” are recommending always to install the database on a “regular” server

2019-02-15 10:23:23 GMT <angelborroy> And they always talk about Docker Volumes performance

2019-02-15 10:23:32 GMT <alfresco-discord> <Thijs> We did some tests with 100M documents (in collaboration with Axel) and even then, it boils down to configuring the memory correctly

2019-02-15 10:23:56 GMT <alfresco-discord> <Thijs> and we did install it on a hardware server, not a VM

2019-02-15 10:24:03 GMT <alfresco-discord> <Thijs> but we have installations on VM's too

2019-02-15 10:24:05 GMT <angelborroy> As I told AFaust yesterday, in my private tests (same resources, same disk, same all…) there were few differences in performance

2019-02-15 10:24:18 GMT <angelborroy> I was comparing a container and a VM

2019-02-15 10:25:08 GMT <angelborroy> I have to say that VM was always faster than Container

2019-02-15 10:25:20 GMT <alfresco-discord> <Thijs> that surprises me

2019-02-15 10:25:21 GMT <angelborroy> But it was only 2-3% better

2019-02-15 10:25:32 GMT <angelborroy> What it’s not relevant (imo) for an ECM

2019-02-15 10:26:57 GMT <alfresco-discord> <Thijs> using docker volumes, or host mounts?

2019-02-15 10:36:25 GMT <alfresco-discord> <Hiten> Thanks AFaust, this is really helpful for me to proceed forward

2019-02-15 10:36:57 GMT <alfresco-discord> <Hiten> and Yes you said end event I just forgot to edit it when I copy pasted 😃

2019-02-15 10:40:38 GMT <angelborroy> @Thijs Docker Volume vs local folder in the file system

2019-02-15 10:40:42 GMT <angelborroy> No mount

2019-02-15 10:42:51 GMT <angelborroy> Obviously also Docker Volume against a local folder in the file system

2019-02-15 10:43:18 GMT <angelborroy> So it’s the same test only including Docker Volume feature overloading

2019-02-15 10:43:30 GMT <angelborroy> That is (in my tests) about 2-3%

2019-02-15 10:52:01 GMT <fwu2018> hello all

2019-02-15 11:15:55 GMT <fwu2018> afaust, did you find anything about aos?

2019-02-15 11:16:29 GMT <fwu2018> Im sstill looking to traces with no luck, although there is somethign that may make the difference

2019-02-15 11:16:55 GMT <fwu2018> when im trying to edit online from Alfresco, the first call is for the following link:

2019-02-15 11:17:32 GMT <fwu2018> /share/proxy/alfresco/slingshot/doclib2/node/workspace/SpacesStore/658116b9-36b8-45d2-8eed-14629b90016d

2019-02-15 11:17:40 GMT <fwu2018> and in the response messgae I see this:

2019-02-15 11:18:00 GMT <fwu2018> "metadata": {

2019-02-15 11:18:10 GMT <fwu2018> "onlineEditing": false,

2019-02-15 11:18:25 GMT <fwu2018> what this property is and where is defined?

2019-02-15 11:18:47 GMT <fwu2018> may be this that makes Alfresco tell Word to open in read only mode?

2019-02-15 11:19:35 GMT <fwu2018> because the problem seem to be related with the way Word open the file. If I open the file from a previous defined webdav dir I m able to edit the document online

2019-02-15 11:20:57 GMT <fwu2018> outside Alfresco the first thing Word does is to make a lock on the file. Something that it doest do when the file is open inside Alfresco.

2019-02-15 11:27:19 GMT <AFaust> fwu2018: Yes, currently going through the network traces and just sent a summary of findings to my customer

2019-02-15 11:27:52 GMT <AFaust> Though I don't know how much of that may match up with your specific issue.

2019-02-15 11:28:28 GMT <AFaust> In my case, the customer is using Word on Mac, and opening a file for edit from the Share UI leads to the file being open, but read-only (with no option to activate editing)

2019-02-15 11:29:54 GMT <AFaust> In the network trace I can see that the Mac Word client is using a completely different pattern of requests to Alfresco (different SharePoint protocol version/logic?), and in one of the responses sent by Alfresco that relates to URL mappings, the answer is slightly different to the response of a similar operation called by a Windows Word client.

2019-02-15 11:30:57 GMT <AFaust> The difference is subtle, and both responses are both technically correct, but apparently a following operation in Alfresco can only deal with a very specific request (the Word client builds the request from information taken from the previous responses)

2019-02-15 11:32:56 GMT <AFaust> So URL mapping of a Windows Word client yields AOS base URL in one response as https://<host>:443/alfresco/aos/

2019-02-15 11:33:13 GMT <AFaust> Different URL mapping operation called from Mac Word client yields AOS base URL as https://<host>/alfresco/aos/

2019-02-15 11:33:46 GMT <fwu2018> but there you have a big difference: the port

2019-02-15 11:33:48 GMT <AFaust> Both are correct, but the operation to load the document metadata only succeeds for the https://<host>:443/alfresco/aos/ based URL

2019-02-15 11:34:07 GMT <AFaust> Yeah, but the port does not actually make a semantic difference.

2019-02-15 11:34:16 GMT <fwu2018> ok, it is the default

2019-02-15 11:34:33 GMT <AFaust> Right - and it can be omitted, but it is perfectly legal to include it.

2019-02-15 11:34:44 GMT <fwu2018> yes

2019-02-15 11:34:56 GMT <fwu2018> but I read that mac needs some configuration

2019-02-15 11:34:59 GMT <AFaust> And it looks like another operation actually requires it to be provided

2019-02-15 11:36:42 GMT <AFaust> Well - for my customer, it used to work before (up until a few weeks ago), but does not anymore after an Office update. So I assume all the previously important configuration was already done, and for some reason the update only changed the interaction model.

2019-02-15 11:37:22 GMT <fwu2018> I see, not controled updates

2019-02-15 11:37:25 GMT <AFaust> There are other quite noticable differences in the HTTP operations being triggered by Mac Word vs. Windows Word, but those do not directly relate to a response that includes the word "failure"

2019-02-15 11:37:27 GMT <fwu2018> I have them disconnected

2019-02-15 11:37:34 GMT <fwu2018> we first test them all

2019-02-15 11:38:30 GMT <fwu2018> afaust, can you tell me if on the first call after clicking the edit button you get the same property value?

2019-02-15 11:38:35 GMT <fwu2018> the one above

2019-02-15 11:38:40 GMT <AFaust> The problem with Microsoft updates: You can never be sure what triggeres a behaviour change. Even if you have Office updates disconnected, if you have a Windows update the behaviour of Office might change as well, and quite dramatically so

2019-02-15 11:38:43 GMT <fwu2018> "onlineEditing": false,

2019-02-15 11:39:17 GMT <AFaust> "The first call" => What specific call? Different clients have different URLs they call in the "first call"...

2019-02-15 11:39:24 GMT <fwu2018> this:

2019-02-15 11:40:07 GMT <fwu2018> url: /share/proxy/alfresco/slingshot/doclib2/node/workspace/SpacesStore/658116b9-36b8-45d2-8eed-14629b90016d

2019-02-15 11:40:22 GMT <fwu2018> this the "preparation" call before the real webfdav stuff

2019-02-15 11:40:59 GMT <fwu2018> but this is returning inside the metadata: "onlineEditing": false,

2019-02-15 11:43:34 GMT <fwu2018> My bet is that this info goes to Word in some way and make word open documents in read-only mode

2019-02-15 11:45:34 GMT <fwu2018> but I dont have a way to compare. that is why Im asking your working example. If you have also this property to false, then it isnt the real problem I have.

2019-02-15 11:50:13 GMT <AFaust> Oh... I am / my customer is way beyond that.

2019-02-15 11:50:42 GMT <AFaust> So in our case the document is definitely editable (onlineEditing provided as true)

2019-02-15 11:51:30 GMT <AFaust> Of course if you open a document from AOS WebDAV you don't actually know in advance if you have permission to edit it, and as such can expect it to show up as read-only if you don't actually have the permissions.

2019-02-15 11:51:50 GMT <AFaust> I had assumed you had already checked the permissions and made sure in your example / issue that they are not standing in your way.

2019-02-15 11:56:29 GMT <fwu2018> afaust, for me online editing should be true because on share I have the option

2019-02-15 11:56:47 GMT <fwu2018> my doubt is if there is somehting more

2019-02-15 11:58:58 GMT <fwu2018> because that property is false, but I dont know if iss related with webdav

2019-02-15 11:59:30 GMT <fwu2018> everything I read about enabling online editing finished in the moment that option is on the share interface, and I have that

2019-02-15 12:00:02 GMT <fwu2018> so why I get "onlineEditing": false for that node? that is my question, but maybe is not related with webdav.

2019-02-15 12:03:59 GMT <fwu2018> so my idea is that alfresco thinks the node should be editable online and is saying to Word to open it in read-only.

2019-02-15 12:04:13 GMT <fwu2018> but where i set online editing for the node/site?

2019-02-15 12:04:49 GMT <AFaust> Well, when you open an Office document via AOS WebDAV, that essentially ends up behaving like online editing.

2019-02-15 12:05:00 GMT <alfresco-discord> <Loftux> Something is not good with alfresco.com sites...

2019-02-15 12:05:16 GMT <AFaust> Because Office tries to be S-M-R-T and "detect" a SharePoint, and then switch behaviour...

2019-02-15 12:05:25 GMT <AFaust> @Loftux: Already known and Alfresco is working on it

2019-02-15 12:07:03 GMT <fwu2018> but what that property means? I dont find any info about it

2019-02-15 12:07:48 GMT <fwu2018> why the metadata returned by the doc2lib has an onlineediting property?

2019-02-15 12:14:56 GMT <AFaust> That property means "has the module org.alfresco.module.vti been installed"

2019-02-15 12:15:16 GMT <AFaust> That appears to be some legacy code that should not be relevant anymore in Alfresco 5.0+

2019-02-15 12:15:36 GMT <fwu2018> ok, then I shouldnt waste time looking to that

2019-02-15 12:15:52 GMT <fwu2018> I also believe I dont need any info about vit on my config, right?

2019-02-15 12:16:01 GMT <fwu2018> I just have made these:

2019-02-15 12:16:11 GMT <fwu2018> install alfresco community default: aos is installed

2019-02-15 12:16:19 GMT <fwu2018> set the ovewrite path to aos

2019-02-15 12:16:27 GMT <fwu2018> is this sufficient?

2019-02-15 12:16:29 GMT <AFaust> I can only stress one more time: You need to check the network trace of the attempt to open the file. Most (if not all) details about why AOS fails can be found there - or not at all

2019-02-15 12:17:00 GMT <fwu2018> afaust, but the lock call is not made

2019-02-15 12:17:20 GMT <AFaust> Then check the details of all the previous calls for potential errors

2019-02-15 12:17:21 GMT <fwu2018> but if I edit online externally to alfresco it works

2019-02-15 12:17:35 GMT <AFaust> That is what I have done in my case and found that one response contained a list of "failedUrls"

2019-02-15 12:17:49 GMT <fwu2018> hmm

2019-02-15 12:17:49 GMT <AFaust> So of course the client then did not proceed to do anything more with the document.

2019-02-15 12:17:55 GMT <fwu2018> well I have one error inded

2019-02-15 12:17:57 GMT <fwu2018> indeed

2019-02-15 12:18:15 GMT <fwu2018> calling this:

2019-02-15 12:18:20 GMT <fwu2018> OPTIONS /alfresco/aos/Sites/papirodemo/documentLibrary/myfiles/2018/2018614114958/

2019-02-15 12:18:23 GMT <fwu2018> I get this:

2019-02-15 12:18:23 GMT <AFaust> And now - by looking at decompiled code of the AOS module - I have actually found the line(s) of code in Alfresco that cause the failure

2019-02-15 12:19:31 GMT <AFaust> If JIRA was up, I could actually check if there already is an issue for that and file one if not (have to think about how to explain that to them so they actually do understand)

2019-02-15 12:19:48 GMT <fwu2018> https://pastebin.com/KxWsW9yX

2019-02-15 12:19:49 GMT <alfbot> Title:HTTP/1.1 200 OK Date: Fri, 15 Feb 2019 12:02:51 GMT Server: Apache/2.4.28 (Win - Pastebin.com (at pastebin.com)

2019-02-15 12:20:04 GMT <fwu2018> this is stange: it is a 200 but with an error

2019-02-15 12:20:17 GMT <AFaust> Alright...

2019-02-15 12:20:27 GMT <AFaust> So you actually have a misconfiguration of your reverse poxy

2019-02-15 12:20:30 GMT <AFaust> proxy

2019-02-15 12:20:42 GMT <fwu2018> using apache

2019-02-15 12:21:14 GMT <AFaust> At least it looks like it - the 200 response code is weird, but I have seen similar errors in other situations with incorrect proxy setup

2019-02-15 12:21:16 GMT <fwu2018> but because webdav is working outside Alfresco, using the smae proxy, I thought that would not be the issue

2019-02-15 12:21:45 GMT <fwu2018> but do you think this may be the reason to get a read-only document?

2019-02-15 12:22:09 GMT <fwu2018> after that call I have other calls: heads and gets

2019-02-15 12:22:17 GMT <fwu2018> that work, althought no locks

2019-02-15 12:22:19 GMT <AFaust> You keep forgetting: Office is not using WebDAV on its own. It is trying to be S-M-R-T. One thing involved in this is an OPTIONS request at the / URL of the server, and if that is not correctly forwarded by the reverse proxy, Office editing will fail

2019-02-15 12:22:59 GMT <AFaust> The OPTIONS call is Office trying to determine if the server supports the SharePoint online editing APIs...

2019-02-15 12:24:00 GMT <fwu2018> hmmm

2019-02-15 12:24:12 GMT <fwu2018> it is true... I dont have any other options call

2019-02-15 12:24:35 GMT <fwu2018> I thought I wouls have additional success options calls

2019-02-15 12:24:38 GMT <fwu2018> but I dont

2019-02-15 12:24:45 GMT <AFaust> For reference: This is one template of my Apache proxy configs (non SSL) - https://github.com/Acosix/acosix-docker-generic/blob/master/baseimage-apache/src/main/resources/alfresco-pure.host.conf.sample#L22

2019-02-15 12:24:46 GMT <alfbot> Title:acosix-docker-generic/alfresco-pure.host.conf.sample at master · Acosix/acosix-docker-generic · GitHub (at github.com)

2019-02-15 12:24:59 GMT <fwu2018> ok, let me see that

2019-02-15 12:26:44 GMT <AFaust> You'll notice that the furst ProxyPassMatch also allows the / URL to be forwarded to the Repository Tomcat

2019-02-15 12:27:45 GMT <AFaust> And that my second rewrite rule only rewrites a GET on / to /alfresco in order to not interfere with OPTIONS on /

2019-02-15 12:30:55 GMT <alfresco-discord> <Alexander Seitz> FYI: https://docs.alfresco.com/ is down 😰

2019-02-15 12:49:47 GMT <AFaust> @Alexander Seitz: A known issue and being worked on...

2019-02-15 13:25:07 GMT <fwu2018> afaust, actually I found this on my apache config:

2019-02-15 13:25:15 GMT <fwu2018> RewriteEngine On

2019-02-15 13:25:20 GMT <fwu2018> RewriteCond %{REQUEST_METHOD} OPTIONS

2019-02-15 13:25:27 GMT <fwu2018> RewriteRule ^(.*)$ $1 [R=200,L]

2019-02-15 13:25:44 GMT <fwu2018> so this may be related with my problem

2019-02-15 13:25:56 GMT <fwu2018> I dont know why these is being used

2019-02-15 13:31:13 GMT <AFaust> So that at least explains the 200 code

2019-02-15 13:38:28 GMT <alfresco-discord> <kgastaldo> Hi All - www.alfresco.com, issues.alfresco.com, and docs.alfresco.com are all down. We're working to resolve!

2019-02-15 13:43:03 GMT <fwu2018> afaust, it is working!

2019-02-15 13:43:41 GMT <fwu2018> you were right (as always). The error on the options call was causing the read-only

2019-02-15 13:44:11 GMT <fwu2018> editing online is now working even from angular

2019-02-15 13:58:27 GMT <fwu2018> afaust, do you know if it is possible to avoid the login box that is shown everytime the word oppens?

2019-02-15 14:04:38 GMT <AFaust> Yes, by using SSO mechanisms

2019-02-15 14:19:37 GMT <alfresco-discord> <Alexander Seitz> @fwu2018 afaust, actually I found this on my apache config: RewriteEngine On RewriteCond %{REQUEST_METHOD} OPTIONS RewriteRule ^(.*)$ $1 [R=200,L] so this may be related with my problem I dont know why these is being used The Rewrite Rule with R=200 is for handling the PreFlight Requests when apache is used to host the adf app. It's related to CORS strategies

2019-02-15 14:19:38 GMT <alfresco-discord> https://community.alfresco.com/community/application-development-framework/blog/2017/06/20/adf-cors-solving-strategies

2019-02-15 14:19:40 GMT <alfbot> Title:ADF CORS solving strategies | Alfresco Community (at community.alfresco.com)

2019-02-15 14:22:35 GMT <alfresco-discord> <Alexander Seitz> @kgastaldo Please give us an update when these *.alfresco.com sites are available again....

2019-02-15 14:23:24 GMT <alfresco-discord> <kgastaldo> Of course. Latest update: IT are actively working with Rackspace to resolve the outage. Investigations are centered on a possible DDOS attack with no ETA for resolution at this time.

2019-02-15 14:25:29 GMT <AFaust> @Alexander Seitz: What the heck has ADF / CORS to do with OPTIONS requests? If true, yet another reason I despise anything relating to these CORS hacks that people seem to be fine employing with ADF...

2019-02-15 14:27:15 GMT <alfresco-discord> <Alexander Seitz> DDOS...seems some poeple are quite angry about alfresco.... https://www.reddit.com/r/alfresco/comments/8deokx/could_you_please_remove_alfresco_from_the_internet/

2019-02-15 14:27:15 GMT <alfresco-discord> <Alexander Seitz> https://cdn.discordapp.com/attachments/451644531323174914/545974373039734805/Diabolisch.png

2019-02-15 14:29:01 GMT <AFaust> What the heck? There is an /r/alfresco ? Is there anybody on there that "we" actually know?

2019-02-15 14:29:52 GMT <AFaust> Ah, I see - it's not very active

2019-02-15 14:32:49 GMT <AFaust> Alexander Seitz: Are you aware of any other documentation relating to ADF + CORS, apart from this very partial blog post? https://community.alfresco.com/community/application-development-framework/blog/2017/06/20/adf-cors-solving-strategies

2019-02-15 14:32:51 GMT <alfbot> Title:ADF CORS solving strategies | Alfresco Community (at community.alfresco.com)

2019-02-15 14:33:51 GMT <AFaust> So far, in all instances where I had to setup ACA for a customer to demo (the lack of features), I never had to deal with CORS at all.

2019-02-15 14:36:37 GMT <fwu2018> Alexander Seitz, that make sense we are using adf...

2019-02-15 14:36:44 GMT <AFaust> Though granted, I always set up my proxies to naturally group all the app under the same DNS name / origin...

2019-02-15 14:36:58 GMT <alfresco-discord> <Alexander Seitz> @AFaust: If you host an ADF app on the tomcat, you would configure /conf/web.xml f and enable the filter for <init-param> <param-name>cors.allowed.methods</param-name> <param-value>GET,POST,HEAD,OPTIONS,PUT</param-value> </init-param> to handle the preflight requests for CORS. As far as I know, with apache it's this rewrtte...

2019-02-15 14:37:06 GMT <fwu2018> but I dont think I need it because im using a middleware/proxy between

2019-02-15 14:41:34 GMT <fwu2018> Alexander Seitz: that "remove from internet page"... I dont understand what that means. Is that something Alfresco should be worry? A person writing something about alfresco somewhere...

2019-02-15 14:41:42 GMT <AFaust> Alexander Seitz: I know that the filter stuff is what Eugenio documented in his superficial blog post, but I seriously wonder if this is even at all necessary in any reasonable setup.

2019-02-15 14:42:45 GMT <AFaust> ... mostly because I never did any of that and never ran into any issues. To me, most of the CORS-related stuff has always appeared to be a "solution so devs don't have to think too hard"

2019-02-15 14:48:04 GMT <AFaust> fwu2018: Reading up on those CORS preflight handling, that rule of yours seems to be a hack to avoid having to configure Tomcat for any CORS handling...

2019-02-15 14:56:19 GMT <fwu2018> hmm

2019-02-15 14:56:34 GMT <fwu2018> I disable my middleware/proxy, and now I have cors problems...

2019-02-15 14:57:19 GMT <fwu2018> so, how can I replace that rewrite without broking edit online?

2019-02-15 14:58:00 GMT <fwu2018> wiht this rule I get on the borwser a 200 for an error

2019-02-15 14:58:26 GMT <alfresco-discord> <Alexander Seitz> how's your infrastructure? where is the adf app hosted?

2019-02-15 15:01:09 GMT <fwu2018> they are on the same machine, but they may not be

2019-02-15 15:12:19 GMT <fwu2018> so, if they are on the same machine I dont get any problem as expected

2019-02-15 15:12:51 GMT <fwu2018> on a different machine I get cors problems. Maybe I may apply that cors fix only in some caller conditions

2019-02-15 15:16:08 GMT <fwu2018> I think I only need to apply that rewrites to links like this: OPTIONS /alfresco/aos/

2019-02-15 15:16:19 GMT <fwu2018> only for /alfresco/aos/

2019-02-15 15:16:42 GMT <fwu2018> actually the opposite

2019-02-15 15:26:52 GMT <AFaust> You should only need the CORS hack / fix if your ADF app is on a different "logical" host than the Repository, so if either protocol, DNS name or the port is different. If your ADF app is also proxied by the same Apache, you should not have a need for CORS:

2019-02-15 15:27:43 GMT <AFaust> That is esentially the constellation I always have. One proxy / DNS entry point for everything Alfresco, and everything going over the same port on the proxy (so either all HTTP or all HTTPS - of course the latter is the default)

2019-02-15 15:28:31 GMT <AFaust> My template for that constellation: https://github.com/Acosix/acosix-docker-generic/blob/master/baseimage-apache/src/main/resources/alfresco-w-share-a-content-app.host.ssl.conf.sample#L31

2019-02-15 15:28:32 GMT <alfbot> Title:acosix-docker-generic/alfresco-w-share-a-content-app.host.ssl.conf.sample at master · Acosix/acosix-docker-generic · GitHub (at github.com)

2019-02-15 15:29:45 GMT <AFaust> Bear in mind I am using Docker for these kinds of demo infrastructures, and have configured a base path for ACA, like is done in this docker-compose file: https://github.com/keensoft/docker-alfresco/blob/master/docker-compose.yml#L68

2019-02-15 15:29:46 GMT <alfbot> Title:docker-alfresco/docker-compose.yml at master · keensoft/docker-alfresco · GitHub (at github.com)

2019-02-15 15:32:13 GMT <AFaust> If you only rewrite OPTIONS for /alfresco/aos then edit online will NOT work. Office REALLY needs OPTIONS on / to redirect to forward to the tomcat ROOT application

2019-02-15 15:33:45 GMT <AFaust> And again, I honestly don't think you need to rewrite rule at all. If I understood CORS preflight correctly, the URL for those OPTIONS requests should be the same as the resource that ADF is trying to access, so /alfresco/xyz

2019-02-15 15:34:11 GMT <AFaust> Any URL /alfresco/xyz should already be properly mapped and forwarded to Tomcat by having the proxy in place.

2019-02-15 15:34:49 GMT <AFaust> So my question really is: Is your Tomcat configured correctly, i.e. do you have those web.xml config in place that Eugenio documented in his blog post?

2019-02-15 15:35:36 GMT <AFaust> Did you include the public address / location of your ADF app in the pattern for allowed origins?

2019-02-15 16:02:50 GMT <fwu2018> afaust, I even set the allowed origin to *

2019-02-15 16:03:10 GMT <fwu2018> right now it is working like this: RewriteCond %{REQUEST_URI} !^/alfresco/aos/*

2019-02-15 16:14:55 GMT <alfresco-discord> <kgastaldo> Another update: Still investigating issue but possible fix on alfresco.com within the next hour.

2019-02-15 16:19:41 GMT * AFaust scraps his plans to do some experiments with custom data collectors for the heartbeat. (don't want to bring down the infrastructure that badly / at all...)

2019-02-15 17:25:10 GMT <alfresco-discord> <kgastaldo> Update: alfresco.com is back up. Working on docs and issues

2019-02-15 19:25:29 GMT <alfresco-discord> <kgastaldo> Looks like everything is back up and running! Sorry for the inconvenience today.

End of Daily Log

The other logs are at http://esplins.org/hash_alfresco